rosstimothy be037192d5 Fix DynamoDB DeleteRange unprocessed item handling (#66954) ...

The BatchWriteItem API can return a response with items that failed to
be written without returning an error. DeleteRange could silently
allow items to never be removed under certain conditions because it
never consumed the response.

A new batchWriteItem helper now manages interactions with the BatchWriteItem
API. Any responses with UnprocessedItems are now retried with backoff.

Resolves https://github.com/gravitational/pressure-washing/issues/137.

2026-06-24 23:47:40 +00:00

..

accessgraph/apiclient

feat: add geo filters to stats endpoint (#67523)

2026-06-12 20:53:04 +00:00

accesslists

Avoid reentrancy in Cache.GetAccessListOwners (#67963)

2026-06-22 14:46:01 +00:00

accessmonitoring

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

agentless

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

asciitable

tsh request search, add support for --format flag (#62015)

2025-12-09 14:49:29 +00:00

auth

Add client-side version verification to join flow (#67627)

2026-06-24 03:19:42 +00:00

authz

add scoped joining for app svc (#67101)

2026-06-24 18:22:29 +00:00

automaticupgrades

chore: Bump golangci-lint to v2.7.2 (#62066)

2025-12-09 17:59:21 +00:00

autoupdate

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

aws

[AWSIC] Tightened filter validation and application (#67234)

2026-06-19 03:48:01 +00:00

backend

Fix DynamoDB DeleteRange unprocessed item handling (#66954)

2026-06-24 23:47:40 +00:00

benchmark

Properly escape resource names in predicate expressions (#67227)

2026-05-29 13:38:48 +00:00

boundkeypair

Adjust provision.Token interface to unsplit Bot accessors in preparation for SQN (#67746)

2026-06-16 08:28:45 +00:00

bpf

support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650)

2026-06-24 18:07:01 +00:00

cache

Avoid reentrancy in Cache.GetAccessListOwners (#67963)

2026-06-22 14:46:01 +00:00

cgroup

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050)

2026-02-19 18:20:18 +00:00

client

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

cloud

Improve Azure VM discovery performance (#67737)

2026-06-18 06:51:55 +00:00

componentfeatures

fix: Compute features for agentless AppServer resources (#67489)

2026-06-05 22:40:07 +00:00

config

Improve Scoped Token UX (#67819)

2026-06-18 16:17:40 +00:00

configurators

EC2 Auto Discover: add new required permission account:ListRegions (#61967)

2025-12-04 09:40:10 +00:00

connectmycomputer

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

cryptosuites

Add AppClient CA (#66273)

2026-04-30 19:05:23 +00:00

darwin

Update Go version to v1.26.4 (#67476)

2026-06-08 14:28:40 +00:00

decision

feat(beams): carry beam_id through identity certificates (#67972)

2026-06-23 13:36:36 +00:00

defaults

[refactoring] remove some deadcode (#66583)

2026-05-11 13:36:46 +00:00

desktop

Refactor reversetunnelclient.Tunnel interface (#57674)

2025-08-21 20:16:55 +00:00

devicetpm

chore: Bump go-attestation to v0.6.0 (#61294)

2025-11-12 20:37:19 +00:00

devicetrust

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

events

Add audit event for Classifier delete, docs, and web UI support (#67763)

2026-06-16 20:44:52 +00:00

expression

Revise predicate language docs and add contains(set, item) (#64864)

2026-04-01 19:11:15 +00:00

fipscheck

fips: Switch to Go-native FIPS140 builds from boring crypto (#66690)

2026-05-20 00:42:41 +00:00

fixtures

Reduce testing symbols in production binaries (#55360)

2025-06-09 16:51:12 +00:00

gcp

Port gcp join method to new join service (#61205)

2025-11-18 00:46:04 +00:00

hardwarekey

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

healthcheck

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

httplib

Add SSE events read/write helper functions to httplib (#67042)

2026-05-27 14:00:59 +00:00

integrations

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

inventory

add scoped joining for app svc (#67101)

2026-06-24 18:22:29 +00:00

itertools

Add DynamicBatchSizeIter util (#61157)

2025-11-12 09:15:01 +00:00

join

Add client-side version verification to join flow (#67627)

2026-06-24 03:19:42 +00:00

jwt

Update Go version to v1.26.4 (#67476)

2026-06-08 14:28:40 +00:00

kube

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

labels

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

limiter

Make rejected accepts retryable in lib/limiter (#66928)

2026-06-22 19:05:20 +00:00

linux

Apply remaining modernize changes. (#56037)

2025-06-25 21:25:29 +00:00

loginrule

feat: JSONPath interpolation for Login Rules (OIDC) (#56598)

2025-08-05 18:41:26 +00:00

loglimit

Fix bug in the log limiter (#63568)

2026-02-06 14:35:13 +00:00

mobile/verify/enroll

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

modules

fips: Switch to Go-native FIPS140 builds from boring crypto (#66690)

2026-05-20 00:42:41 +00:00

msgraph

msgraphtest: monkeypatch user and group delta endpoint (#67980)

2026-06-22 14:08:00 +00:00

multiplexer

Update Go version to v1.26.4 (#67476)

2026-06-08 14:28:40 +00:00

observability

[fix] Use provided registry in metrics.RegisterCollectors (#64919)

2026-03-24 14:17:20 +00:00

oidc

chore: Bump opentelemetry to v1.40.0 (#64014)

2026-02-20 18:45:30 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420)

2025-06-10 11:09:04 +00:00

openssh

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

player

Desktop Session Playback Hardening (#66925)

2026-06-16 16:11:16 +00:00

plugin

Initialize usage reporting via plugin registry after auth server setup (#64265)

2026-03-26 11:46:12 +00:00

plugins

proto PluginSyncFilter to filter input type converter (#62187)

2025-12-19 06:27:17 +00:00

proxy

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

puttyhosts

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

relaypeer

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

relaytransport

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145)

2026-04-01 12:34:10 +00:00

relaytunnel

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

release

Clean up some utils (#57423)

2025-08-01 18:42:18 +00:00

resourceusage

Convert lib/resourceusage to use slog (#50311)

2024-12-17 13:30:33 +00:00

resumption

Set Teleport version in SSH clients (#65004)

2026-04-07 18:06:00 +00:00

reversetunnel

reversetunnel: support tracker discovery ttl and disconnects (#65419)

2026-06-12 18:22:01 +00:00

reversetunnelclient

app access: improve handling of overlapping public addrs (#67519)

2026-06-18 17:27:52 +00:00

saml

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

scopes

add scoped joining for app svc (#67101)

2026-06-24 18:22:29 +00:00

secret

Fix log messages and tsh command description (#61037)

2025-11-05 15:31:30 +00:00

secretsscanner

[2] Migration to the Opaque API (#67384)

2026-06-08 13:21:41 +00:00

service

add scoped joining for app svc (#67101)

2026-06-24 18:22:29 +00:00

services

add scoped joining for app svc (#67101)

2026-06-24 18:22:29 +00:00

session

Improve error message for terminal size unmarshalling (#62775)

2026-01-13 11:35:05 +00:00

srv

add scoped joining for app svc (#67101)

2026-06-24 18:22:29 +00:00

sshagent

Allow concurrent connections to forwarded SSH agents (#67116)

2026-06-01 08:56:52 +00:00

sshca

feat(beams): carry beam_id through identity certificates (#67972)

2026-06-23 13:36:36 +00:00

sshutils

Make rejected accepts retryable in lib/limiter (#66928)

2026-06-22 19:05:20 +00:00

subca

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

system

Convert lib/system to use slog (#50300)

2024-12-17 13:27:21 +00:00

systemd

Add join failure handling for ec2 using readyz health check (#64296)

2026-04-20 14:59:21 +00:00

tbot

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

teleterm

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

terminal

Reduce the memory usage of the session recording processor by ~80% (#60266)

2025-10-15 15:21:54 +00:00

tfgen

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

tlsca

feat(beams): carry beam_id through identity certificates (#67972)

2026-06-23 13:36:36 +00:00

tlscatest

Add the tlscatest.GenerateSelfSignedCA helper (#64113)

2026-03-02 16:29:45 +00:00

tpm

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

uds

chore: Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.0 (#44739)

2024-07-29 15:05:34 +00:00

ui

Align label sorting in Connect with what Web UI does (#48086)

2024-10-30 09:54:28 +00:00

usagereporter

Add BeamCreate and BeamDestroy usage events (#67738)

2026-06-22 16:31:19 +00:00

usertasks

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

utils

tsh: add "tsh apps logins" command. (#67899)

2026-06-23 14:46:13 +00:00

versioncontrol

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145)

2026-04-01 12:34:10 +00:00

vnet

[3] Final migration to the Opaque API (#67385)

2026-06-18 19:41:17 +00:00

watcher

Adjust log level on some noisy entries (#61076)

2025-11-06 21:03:31 +00:00

web

add scoped joining for app svc (#67101)

2026-06-24 18:22:29 +00:00

windowsexec

Convert lib/windowsexec to use slog (#50307)

2024-12-17 04:47:52 +00:00

windowsservice

Connect: gracefully handle VNet service and app version mismatch (#64438)

2026-03-19 07:45:58 +00:00

winpki

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00